docs: align developers hub with doctrine v11 (remove codenames, honest labels)

[Lutar, Stephen P. (stephenlutar2-hash)]

Summary

Doctrine v11 audit + fix sweep of szl-holdings/developers (developer hub docs + static site).

Fixed

• User-visible codenames removed (doctrine rule: no amaru/rosie/sentra on user surfaces). Stripped every "internal codename amaru/rosie/sentra, retired" annotation and codename-bearing Space URL (szlholdings-amaru/rosie/sentra.hf.space) from API_REFERENCE.md, GRAPHQL.md, QUICKSTART.md, VERIFY.md, SUBSTRATE_PACKAGES.md. Honest role names (Provenance Anchor / Operator / Policy) and the roadmap/404/not-deployed facts are preserved. GraphQL example ids switched from codename amaru to the live a11oy.
• Renamed codename example files: EXAMPLES/rosie_command_example.py -> operator_command_example.py, EXAMPLES/sentra_filter_example.py -> policy_filter_example.py (no docs linked the old names); docstrings de-codenamed.
• Surface count: README "~50 governed surfaces" -> 56 (doctrine VERIFIED FACT: flagship serves 56 holographic surfaces).
• Mobile viewport: 100vh -> 100dvh in site/assets/kanchay.css; calc(100vh - 56px) -> calc(100dvh - 56px) in site/reference.html.
• Hygiene: added .gitignore (Python __pycache__, OS/editor junk) — repo had none.

Audited clean (no change needed)

• No a11oy.net anywhere (canonical a-11-oy.com already in use; GitHub homepage field already = a-11-oy.com).
• No purple in UI. kanchay.css palette is canonical (void #080c14, proof #3af4c8, lattice #5b8dee, gold #d7b96b).
• Honest labels verbatim; Λ = Conjecture 1 (never a theorem, capped) consistently. Locked-8 = exactly {F1,F4,F7,F11,F12,F18,F19,F22}.
• 0 runtime CDN (three.js references are documentation only). Python examples compile.
• Badge/DOI/link targets and live Space endpoints (/healthz, /holographic, docs-site compliance) all return 200.

Testing

• python3 -m py_compile EXAMPLES/*.py passes
• curl checks: all README external links + live Spaces return 200
• grep confirms zero remaining codenames / a11oy.net

Do not merge — main agent handles merge under branch protection.